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, , / vPx fir- mntiinn n and storing rhanpgiiypri riata with anetwork analyzer; 

'\k* S v tf JTo&3<*Z " 

c • " ',vW ) ■ jntejrj eavin g the cnanneliz^ data into a unitary data str^gm in chronological 
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order; and 

processing t 
elements ./* Zy\sri# 




unitary d ata stream to extrapolate indicators 



etwork 
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The method of claim 1, wherein processino^tha ^unitarv data stream further 



comprisesjtetermining a left and right topology from tjie network analyze r. 

3. The method of claim 2, further comprising analyzing^rdered sets, source and 
destination IDs/and ordering of events in the unitary data tracs kto determine tjie 



presence of network elements. 



4. T he method of claim 3 f further comprising analyzing open and close 



commands in the unitary data trace to determine th e presence of aJooj 



/ 



5. 



^The method of claim 3 t further comprising analyzing device addresses iq^^ 
unitary data trace to determine t he presen ce dtswjtchi^^ 



/ 



6. T he method of claim 3, further comBrigjnfl^najyzjn g ordering^ of events in the. 



, „ ^ — 

unitary datatrace to determine the^resence of steajth mode switche s. 




vork analysis., 
process, comprising: 

positioning at least aQejTe^wod^n^lyzer in communication with t he network; 
)turing^jrace_daja from a ^Tirst and second channe l on each df jfae^ 
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determining a first topolo gy corresponding to the first channe l of eac 
analyzer; 

determining ^ second topo logy corresponding to the second channel of eac 
analyzer; 

combining the first and second topologies f rom ea ch of the analyzerg ; and 
deletinq)duplj^ataJopoloq y entries fronrlffi^ combined topology " to generate 
the network topology. 
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l ethod o f claim 7, whereinNp ositionjn g^the at least one/network/analyzer 



further comprises positioning t he analyzers such that bidirectional comrriunication 
between each network element may be captured in a data trace. 




9. The method of claim 7, wherein captu ring trace data further comprises storinj 
channelized data for subsequent processing. 



/ 



10. The method of claim 7, wherein determining thaJiist and second topology 
comprises analyzing ordered sets, source and dB Stination^idftnl [ficatio ns f ^ device 
/^addresses, and ordering of events in the trace data t o determine the presence of 

rdered sets, source and destination 



G 



/ network elements that correspond to th 
^ identifications, and device addresses. 





v \r _ T>ie me thg d of claim 10, further comprising analyzing open and close 

(f " commands in the trace data to determine the presence of t a loo£ on tha network. 

■= — • ^ ^ — 

• ^^^^^^^^^ 

12. jrhe jr vethod of claim 10, further comprising analyzing d evice addresse s irUh$ 
trace data to determine the presence o f switches on the network. 





13. T he method of claim 10, further comprising analyzing efctenogrfit^vanls^in 
the trace'HataTo determine the presence of stealth mode switches on the network. 
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iH. Th e meth od of claim 7, further comprising displaying the network topology to 
a user via a graphical user interfac e. 



7/15. (^ A mfithf/ri for analyzing a network to determine topology Q\ ^jW network, 
comprising: 

positioning at least one analyzer in communication with the network; 



4 



capturing a lefKCfiannel and a right channel data trace from each of the a t 
le ast one analyzers ; ^ftksk^] tf^ 

ig' Silatwor k riff^ire presence indicators from the left and right 



^LvUT^ extrapolat 1 
channel data: and 



determining the network topology from tr ie network device indicators; and 



displaying 




ined network topology t o a use r. 




16. Tjis. metho d, of claim 15 t further comprising combining the left and righty t 
^channeLdata into a unitary Hat ? stream. 

17. 





Ih^melhQji of claim 16, wherein determining the network topology comprises 



determining a left topojogy and alright tnpnlng y for each of the at least one 
^analyzejs and combining the left and riajit^to^ologi^ to determin< 






18. ^Thft mfithg ri of claim 15, wherein determining the network topology comprises 



^ \< analyz ing ordered sets , source and destination identificatio ns, devic eaddre sses, 
^? - "*" - - - ' ~ 

^ and ordering of events in ]hff riata tra ,Cjt ir> determine t he presence of network 



devices that correspond to the ordered sets, so urce and destination^ identifications , 
and device addresses. """" "~ 





19. Thft moth< i^ of claim 18, wherein the ord ered se ts are analyzed to determine 
the presence of^jgs on jhe netw ork. 
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20. The method 
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determine th e presen ce of-switches o n the netw ork.*? 



'"'21. 





T^ emethod of claim 18, wheref^^g^g^^evepg ^analy^to determine,- 
^ ^ ia^itcheson the r 
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